[avidphantasm]

If you decide to use a bastion host, why not use a security-focused OS like OpenBSD?

[teloli]

If you’re using - say - Debian all over your infra, introducing a whole new OS just for the bastions increases complexity without bringing any significant advantage.

[0xdeadb00f]

It genuinely seems like the perfect OS for this. Install minimal sets, disable some unnecessary default services, and viola..